also remove secure_session cookie, fixes https account switching in Firefox, doesn't seem to negatively affect Chrome.